This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json) Hash identifier: HTwG8j5allVZfhasT7fhYggRmuRT5c1DC5SMLZGTBVI= Subject key identifier: A1:10:4D:3A:5D:72:B1:19:69:B7:5A:C4:72:46:6E:0A:BC:08:19:66 Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18 Certificate serial: 019BF8AD8934C22896B0B5AE43118516742C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft Manifest number: 0E23 Signing time: Mon 26 Jan 2026 05:01:20 +0000 Manifest this update: Mon 26 Jan 2026 05:01:20 +0000 Manifest next update: Tue 27 Jan 2026 05:01:20 +0000 Files and hashes: 1: 9JPFM2rp1AJU61yKPb3yN0I-r5g.roa (hash: mnn7ewBGXd1rxHey+dFWTpkcBAS5QbWkbze3C0d4nK8=) 2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: 5UR4JZ7626S5fkf0z5L/wRN/QPbS0oZW4Tffy4DB6eA=) 3: p-aRXnAuitxe8o-22Bwes1ewmqY.roa (hash: U9mseaIe8Qq3Xii4N/S+qJKQzkE3rG5+HAlIviFWvi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:89:34:c2:28:96:b0:b5:ae:43:11:85:16:74:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18 Validity Not Before: Jan 26 05:01:20 2026 GMT Not After : Jan 27 05:01:20 2026 GMT Subject: CN=a1104d3a5d72b11969b75ac472466e0abc081966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:b3:69:26:f3:13:c2:a2:2a:ca:d8:67:6e: dc:75:de:bc:57:7c:62:4f:95:b9:d6:75:bd:22:0a: 5f:53:04:a9:e2:bb:fd:12:26:86:7b:92:36:3a:c4: 03:62:5e:a7:da:e8:93:13:c8:74:b5:df:a4:69:65: 95:18:9e:a2:0a:39:77:37:de:cc:96:99:d0:8e:86: 92:a1:8f:de:93:f0:4c:b9:3c:12:3d:e5:75:83:44: 0b:83:42:24:2d:14:85:27:f5:0f:1c:f5:f0:fe:77: a1:15:4a:61:07:3e:fd:db:e1:dc:3b:1c:e9:14:7e: d5:ee:dd:ca:02:71:b1:b8:29:da:5f:ef:5d:a8:15: f4:21:c8:2e:24:ae:1f:d9:54:63:eb:83:4a:44:9e: 5a:b1:8d:9e:25:93:15:5b:ea:ff:f7:65:22:d9:a2: e8:16:cd:ba:73:27:82:c4:d4:2a:34:9c:0a:a4:ae: 9a:4f:cb:71:0c:39:f4:69:8b:7f:94:e7:21:35:b6: c6:c2:9c:aa:05:80:a1:38:74:0b:ea:96:2c:be:c1: 28:77:87:4c:87:0f:cc:6d:53:d2:c8:d6:ca:16:6f: a0:ae:a0:8b:e2:50:a9:97:0b:30:7e:ee:0e:a7:b5: c2:81:01:86:95:24:56:bb:4a:8e:6f:44:b1:57:cf: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:4D:3A:5D:72:B1:19:69:B7:5A:C4:72:46:6E:0A:BC:08:19:66 X509v3 Authority Key Identifier: keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:16:6a:55:95:48:ec:44:17:93:b3:d9:c4:bc:7f:a3:83:90: b0:27:25:59:9e:75:03:fd:0d:98:3b:91:2c:27:ad:94:9d:4f: 91:1a:63:05:10:11:05:16:53:ca:8f:7a:d5:2a:10:30:8f:6c: a7:3b:59:99:d1:d8:99:e5:e4:5e:ea:41:c6:07:4f:20:67:5c: 68:18:07:9d:7c:23:db:86:4f:a4:33:7b:cf:be:5d:97:2a:df: 2c:b6:d8:59:7d:1a:0c:e1:b1:21:2a:cc:83:e2:60:c7:51:88: fa:83:14:79:bc:bb:bd:c8:c2:34:2c:30:53:d8:18:f0:ea:12: ed:d3:b1:c3:5e:c2:4f:07:ec:a8:58:e0:ef:1a:5f:dc:b3:65: b0:b7:68:9c:19:73:72:27:b1:17:29:0a:35:36:82:ed:e1:2b: 47:ce:5a:47:97:26:e0:34:c3:28:46:a9:a9:55:bf:98:03:7b: 21:b5:5d:32:3a:39:44:df:e6:82:1f:8d:02:53:4c:62:5e:21: 66:f7:82:29:d0:25:4c:4f:21:ae:4f:36:7f:18:60:8d:97:ee: 57:8f:bb:28:c5:b3:09:c1:6d:1c:a5:b0:48:4e:79:0f:47:a0: 2c:6f:62:21:f5:82:06:92:3b:44:f4:a7:46:83:a9:c1:d4:63: 8a:36:a8:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rYk0wiiWsLWuQxGFFnQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmOWE0NjcwMTQ2YWQ4ODBmMTRiYWRhNGIyNzYyYjYxM2Rk ZjFkMTgwHhcNMjYwMTI2MDUwMTIwWhcNMjYwMTI3MDUwMTIwWjAzMTEwLwYDVQQD EyhhMTEwNGQzYTVkNzJiMTE5NjliNzVhYzQ3MjQ2NmUwYWJjMDgxOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIyzaSbzE8KiKsrYZ27cdd68V3xi T5W51nW9IgpfUwSp4rv9EiaGe5I2OsQDYl6n2uiTE8h0td+kaWWVGJ6iCjl3N97M lpnQjoaSoY/ek/BMuTwSPeV1g0QLg0IkLRSFJ/UPHPXw/nehFUphBz792+HcOxzp FH7V7t3KAnGxuCnaX+9dqBX0IcguJK4f2VRj64NKRJ5asY2eJZMVW+r/92Ui2aLo Fs26cyeCxNQqNJwKpK6aT8txDDn0aYt/lOchNbbGwpyqBYChOHQL6pYsvsEod4dM hw/MbVPSyNbKFm+grqCL4lCplwswfu4Op7XCgQGGlSRWu0qOb0SxV8+IdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEQTTpdcrEZabdaxHJGbgq8CBlmMB8GA1UdIwQY MBaAFI+aRnAUatiA8UutpLJ2K2E93x0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEt N2NkNTA4ZjczMzY0LzEvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8zNTQ0MzAtNTRiYy00NTVlLWIwZDEtN2NkNTA4ZjczMzY0 LzEvajVwR2NCUnEySUR4UzYya3NuWXJZVDNmSFJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBZqVZVI 7EQXk7PZxLx/o4OQsCclWZ51A/0NmDuRLCetlJ1PkRpjBRARBRZTyo961SoQMI9s pztZmdHYmeXkXupBxgdPIGdcaBgHnXwj24ZPpDN7z75dlyrfLLbYWX0aDOGxISrM g+Jgx1GI+oMUeby7vcjCNCwwU9gY8OoS7dOxw17CTwfsqFjg7xpf3LNlsLdonBlz ciexFykKNTaC7eErR85aR5cm4DTDKEapqVW/mAN7IbVdMjo5RN/mgh+NAlNMYl4h ZveCKdAlTE8hrk82fxhgjZfuV4+7KMWzCcFtHKWwSE55D0egLG9iIfWCBpI7RPSn RoOpwdRjijaoxA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:48:32 2026 by rpki-client